Toady I found good KB article about SRM ports which are required for successful implementation and site pairing.

Site Recovery Manager can experience problems if the required network ports are not open.

In a Site Recovery Manager deployment, both the protected site and the recovery site must be able to resolve the vCenter Server instance by name. The correct ports must be open on both sites for uninterrupted communication.

Site Recovery Manager requires certain ports to be open on vCenter Server, Platform Services Controller, and on ESXi Server:

Default Port

Protocol or Description

Source

Target

Description

443

HTTPS

Site Recovery Manager

vCenter Server

Default SSL Web port

443

HTTPS

Site Recovery Manager

Platform Services Controller

Traffic from Site Recovery Manager Server to local and remote Platform Services Controller.

902

TCP and UDP

Site Recovery Manager Server on the recovery site

Recovery site ESXi host

Traffic from the Site Recovery Manager Server on the recovery site to ESXi hosts when recovering or testing virtual machines with IP customization, with configured callout commands on recovered virtual machines, or that use raw disk mapping (RDM). All NFC traffic for updating or patching the VMX files of virtual machines that are replicated using vSphere Replication use this port.

Site Recovery Manager Server 6.1 network ports

The Site Recovery Manager Server instances on the protected and recovery sites require certain ports to be open.

Note: Site Recovery Manager Server at the recovery site must have NFC traffic access to the target ESXi servers.

Default Port

Protocol or Description

Source

Target

Endpoints or Consumers

443

HTTPS

Site Recovery Manager

vCenter Server

Default SSL Web Port for incoming TCP traffic

443

HTTPS

Site Recovery Manager

Platform Services Controller

Traffic from Site Recovery Manager Server to local and remote Platform Services Controller.

902

TCP and UDP

Site Recovery Manager Server on the recovery site

Recovery site ESXi host

Traffic from the Site Recovery Manager Server on the recovery site to ESXi hosts when recovering or testing virtual machines with IP customization, with configured callout commands on recovered virtual machines, or that use raw disk mapping (RDM). All NFC traffic for updating or patching the VMX files of virtual machines that are replicated using vSphere Replication use this port.

All management traffic to Site Recovery Manager Server goes to this port. This includes traffic by external API clients for task automation and HTTPS interface for downloading the UI plug-in and icons. This port must be accessible from the vCenter Server proxy system. Used by vSphere Web Client to download the Site Recovery Manager client plug-in.

Network ports that must be open on Site Recovery Manager and vSphere Replication Protected and Recovery sites

Site Recovery Manager and vSphere Replication require that the protected and recovery sites can communicate.

Port

Protocol or Description

Source

Target

Endpoints or Consumers

31031

Initial replication traffic

ESXi host

vSphere Replication appliance on the recovery site

From the ESXi host at the protected site to the vSphere Replication appliance at the recovery site.

44046

Ongoing replication traffic

ESXi host

vSphere Replication appliance on the recovery site

From the ESXi host at the protected site to the vSphere Replication appliance at the recovery site.